In this guide, I’ll show you how to install the RSAT tools on Windows 10, Windows 11, and Windows Server. I’ll also show you how to install RSAT using PowerShell.
To remotely manage Active Directory, DNS, DHCP, and other Windows features you will need the Remote Server Administration Tools (RSAT) installed.
- Install RSAT Tools on Windows 10
- Install RSAT Tools on Windows 11
- Install RSAT Tools on Windows Server
- How to Install RSAT using PowerShell
Note: Starting with Windows 10 October 2018 Update, the RSAT tools no longer need to be downloaded. They are now included with the Windows build and just need to be installed. RSAT tools are only supported on Windows Pro and Enterprise versions of Windows 10 and 11.
1. Open Apps & features and click on “Optional features”
2. Click on Add a feature.
3. Type rsat and then select the RSAT tools you want to install.
In this example, I’ll install the Active Directory, DHCP, and DNS tools.
4. Click install to start the installation.
When the installation is complete the status will say installed.
You can now navigate to the start -> Windows Administrative Tools to open one of the RSAT tools.
Install RSAT on Windows 11
On Windows 11 go to settings and then Apps.
Click on Optional Features.
Click on the View Features button.
Type in rsat and select the tools you want to install.
In this example, I’ll select the Active Directory Domain Services tool.
Click “Next”.
Click “Install”.
When the installation is complete, you can access the tools by going to all apps -> Windows Tools.
Install RSAT on Windows Server
These steps work for Server 2016, 2019, and 2022.
1. Open the Server Manager and click on Add roles and features
Click Next.
Select “Role-based or featured-based installation” and click next
Select your server and click next.
For server roles click Next. (We are not adding any server roles).
For features scroll down to Remote Server Administration Tools).
Select the tools you want to install and click next.
Confirm the selections and click install.
When the installation is complete the tool can be accessed from start -> Windows Administration Tools
Using PowerShell to Install RSAT
You can install individual RSAT tools or all of them using Powershell.
Example 1.Install all RSAT tools run the below command.
Get-WindowsCapability -Name RSAT* -Online | Add-WindowsCapability –Online
Example 2. Install Specific RSAT Tool using PowerShell
To install individual tools you will use the Add-WindowsCapability -Online -Name command followed by the PowerShell tool name.
In this example, I’ll install the Active Directory Domain Servers tools using the command below.
Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0Use the names below to install other RSAT tools via PowerShell.
Active Directory Domain Servers and Lightweight Directory Services Tools: Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0
BitLock Drive Encryption Administration Tools: Rsat.BitLocker.Recovery.Tools~~~~0.0.1.0
Active Directory Certificate Services:
Rsat.CertificateServices.Tools~~~~0.0.1.0
DHCP Server Tools:
Rsat.DHCP.Tools~~~~0.0.1.0
DNS Server Tools:
Rsat.Dns.Tools~~~~0.0.1.0
Failover Clustering Tools:
Rsat.FailoverCluster.Management.Tools~~~~0.0.1.0
File Services Tools:
Rsat.FileServices.Tools~~~~0.0.1.0
Group Policy Management Tools:
Rsat.GroupPolicy.Management.Tools~~~~0.0.1.0
IP Address Management (IPAM) Client:
Rsat.IPAM.Client.Tools~~~~0.0.1.0
Data Center Bridging LLDP Tools:
Rsat.LLDP.Tools~~~~0.0.1.0
Network Controller Management Tools:
Rsat.NetworkController.Tools~~~~0.0.1.0
Network Load Balancing Tools:
Rsat.NetworkLoadBalancing.Tools~~~~0.0.1.0
Remote Access Management Tools:
Rsat.RemoteAccess.Management.Tools~~~~0.0.1.0
Remote Desktop Services Tools:
Rsat.RemoteDesktop.Services.Tools~~~~0.0.1.0
Server Manager:
Rsat.ServerManager.Tools~~~~0.0.1.0
Shielded VM Tools:
Rsat.Shielded.VM.Tools~~~~0.0.1.0
Storage Migration Service Management Tools:
Rsat.StorageMigrationService.Management.Tools~~~~0.0.1.0
Storage Replica Module for Windows PowerShell:
Rsat.StorageReplica.Tools~~~~0.0.1.0
System Insights Module for Windows PowerShell:
Rsat.SystemInsights.Management.Tools~~~~0.0.1.0
Volume Activation Tools:
Rsat.VolumeActivation.Tools~~~~0.0.1.0
Windows Server Update Services Tools:
Rsat.WSUS.Tools~~~~0.0.1.0
You can use PowerShell to view which RSAT tools are installed with the following command.
Get-WindowsCapability -Name RSAT* -Online | Select-Object -Property DisplayName, State
Simplify Active Directory Management with AD Pro Toolkit
Managing Active Directory with the RSAT tools has its limitations, such as bulk editing and no reporting. Fortunately, the AD Pro Toolkit simplifies bulk management and reporting with its comprehensive set of Active Directory Tools. The toolkit also includes a built in scheduler to automate tasks and reporting.
AD Pro Toolkit Key Features:
- Bulk import users
- Bulk update users
- Cleanup inactive user and computer accounts
- User management tools
- Quickly unlock and reset user passwords
- Manage user group membership
- Onboard and offboard users
- 200+ built-in Active Directory reports
In addition to the management tools, the toolkit includes over 200 built in Active Directory Reports. Create security reports, compliance reports, customize reports and send email reports.
Try the AD Pro Toolkit for 14 days and experience the All-in-One Toolkit that makes managing Active Directory fast, easy and efficient. Download AD Pro Toolkit now and try it for yourself. Easy to Install and get started in minutes
I hope you found this article helpful. If you have questions leave a comment below.
Администратор DNS сервера на Windows для управления сервером, DNS зонами и записями может использовать старую добрую утилиту
Dnscmd
, или воспользоваться возможностями PowerShell модуля DNSServer. В этой статье мы рассмотрим основные операцию по массовому созданию, модификации и удалению различных DNS записей и зон с помощью PowerShell.
Содержание:
- Модуль PowerShell — DNSServer
- Управление DNS зонами из PowerShell
- Управление DNS записиями с помошью модуля DNSServer
- Как добавить сразу несколько A / PTR записей в DNS зону с помощью PowerShell?
Модуль PowerShell — DNSServer
PowerShell модуль DNSServer входит в состав RSAT. В Windows 10 RSAT устаналивается отдельно, а в Windows Server вы можете установить модуль через Server Manager (Role Administration Tools -> Dns Server Tools).
Проверим, что в системе имеется модуль PoSh DNSServer:
Get-Module DNSServer –ListAvailable
Можно вывести список команд в нем (в версии модуля на Windows Server 2012 R2 доступно более 100 команд):
Get-Module DNSServer
Управление DNS зонами из PowerShell
Выведем список зон на DNS сервере (в нашем случае это контроллер домен):
Get-DnsServerZone –ComputerName dc01
Чтобы добавить новую первичную DNS зону с именем contoso.local, выполните команду:
Add-DnsServerPrimaryZone -Name contoso.local -ReplicationScope "Forest" –PassThru
Как вы видите, была создана первичная DNS зона, интегрированная в Active Directory (isDsIntegrated=True).
Можно создать зону обратного просмотра (Lockup Zone):
Add-DnsServerPrimaryZone -NetworkId "192.168.1.0/24" -ReplicationScope Domain
Чтобы синхронизировать новую зону с другими DC в домене, выполните команду:
Sync-DnsServerZone –passthru
Выведем список записей в новой DNS зоне (она пуста):
Get-DnsServerResourceRecord -ComputerName dc01 -ZoneName contoso.local
Для удаления зоны воспользуйтесь командой:
Remove-DnsServerZone -Name contoso.local -ComputerName dc01
Эта команда также удалит все существующие DNS записи в зоне.
Управление DNS записиями с помошью модуля DNSServer
Чтобы создать новую A запись в указнаной DNS зоне, воспользуемся командой:
Add-DnsServerResourceRecordA -Name rds1 -IPv4Address 192.168.1.30 -ZoneName contoso.local -TimeToLive 01:00:00
Чтобы добавить PTR запись в обратной зоне, в предыдущей команде можно добавить параметр –CreatePtr или создать указатель вручную командлетом Add-DNSServerResourceRecordPTR:
Add-DNSServerResourceRecordPTR -ZoneName 1.168.192.in-addr.arpa -Name 30 -PTRDomainName rds1.contoso.local
Для добавления алиаса (CNAME) для определенной A записи, воспользуйтесь командой:
Add-DnsServerResourceRecordCName -ZoneName contoso.local -Name RDSFarm -HostNameAlias rds1.contoso.local
Чтобы изменить IP адрес данной A записи нужно воспользоваться довольно сложной схемой, т.к. вы не можете напрямую изменить IP адрес у DNS записи.
$NewADNS = get-DnsServerResourceRecord -Name rds1 -ZoneName contoso.local -ComputerName dc01
$OldADNS =get-DnsServerResourceRecord -Name rds1 -ZoneName contoso.local -ComputerName dc01
Теперь изменим свойство IPV4Address у объекта $NewADNS
$NewADNS.RecordData.IPv4Address = [System.Net.IPAddress]::parse('192.168.1.230')
Теперь изменим IP адрес A записи с помощью Set-DnsServerResourceRecord:
Set-DnsServerResourceRecord -NewInputObject $NewADNS -OldInputObject $OldADNS -ZoneName contoso.local -ComputerName dc01
Проверим, что IP адрес A записи изменился:
get-DnsServerResourceRecord -Name rds1 -ZoneName contoso.local
Можно вывести список DNS записей одного типа, указав тип в аргументе –RRType. Выведем список записей CNAME в зоне:
Get-DnsServerResourceRecord -ComputerName DC01 -ZoneName contoso.local -RRType CNAME
Также вы можете использовать фильтр по различным параметрам DNS записей с помощью Where-Object. Например, выведем список A записей, у которых в имени есть фраза rds.
Get-DnsServerResourceRecord -ZoneName contoso.local -RRType A | Where-Object HostName -like "*rds*"
Для удаления записей в DNS используется командлет Remove-DnsServerResourceRecord.
Например, для удаления CNAME записи, выполните:
Remove-DnsServerResourceRecord -ZoneName contoso.local -RRType CName -Name RDSFarm
Для удаления A записи:
Remove-DnsServerResourceRecord -ZoneName contoso.local -RRType A -Name rds1 –Force
Для удаления PTR записи в обратной зоне:
Remove-DnsServerResourceRecord -ZoneName “1.168.192.in-addr.arpa” -RRType “PTR” -Name “30”
Как добавить сразу несколько A / PTR записей в DNS зону с помощью PowerShell?
Допустим, вам нужно создать сразу множество A записей в определенной DNS зоне прямого просмотра. Вы можете завести их по-одной с помощью команды Add-DnsServerResourceRecordA, но гораздол проще и быстрее массово завести A записи по списку из файла.
Создайте текстовый файл NewDnsRecords.txt ч именами и IP адресами, которые вы хотите завести. Формат файла такой:
HostName, IPAddress
Чтобы завести A записи в зоне contoso.local по данным из TXT/CSV файла, воспользуйтесь следующим скриптом PowerShell:
Import-CSV "C:\PS\NewDnsRecords.txt" | %{
Add-DNSServerResourceRecordA -ZoneName contoso.local -Name $_."HostName" -IPv4Address $_."IPAddress"
}
Если нужно сразу завести записи в обратной зоне, добавьте в команду Add-DNSServerResourceRecordA параметр –CreatePtr.
Теперь с помощью консоли DNS Manager (dnsmgmt.msc) или команнды
Get-DnsServerResourceRecord -ZoneName contoso.local
убедитесь, что все A записи успешно созданы.
Если нужно массово завести PTR записи в зоне обратного просмотра создайте текстовый/csv файл со следующей структурой
octet,hostName,zoneName 65,rds5.contoso.local,1.168.192.in-addr.arpa 66,rds6.contoso.local,1.168.192.in-addr.arpa 67,rds7.contoso.local,1.168.192.in-addr.arpa.
Затем запустите такой скрипт:
Import-CSV "C:\PS\NewDnsPTRRecords.txt" | %{
Add-DNSServerResourceRecordPTR -ZoneName $_."zoneName" -Name $_."octet" -PTRDomainName $_."hostName"
}
Убедитесь, что PTR записи появились в указанной Reverse зоне DNS.
Download Windows Speedup Tool to fix errors and make PC run faster
After you download and install the RSAT (Remote Server Administration Tool) client by double-clicking the package, you might notice the DNS server tools are missing. This post will provide alternative steps to install the RSATClient so that all tools are installed correctly.
To work around this issue, do the following:
- Make sure that the update KB2693643 is not already installed on the computer. If the update is installed, uninstall the update.
- Create a new directory – for example, temp.
- For x64 versions of Windows, create files unattend_x64.xml and installx64.bat as follows:
unattend_x64.xml
<?xml version="1.0" encoding="UTF-8"?> <unattend xmlns="urn:schemas-microsoft-com:setup" description="Auto unattend" author="pkgmgr.exe"> <servicing> <package action="stage"> <assemblyIdentity buildType="release" language="neutral" name="Microsoft-Windows-RemoteServerAdministrationTools-Client-Package-TopLevel" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" version="10.0.16299.2"/> <source location="." permanence="temporary"/> </package> </servicing> </unattend>
installx64.bat
@echo off md ex expand -f:* WindowsTH-RSAT_WS_1709-x64.msu ex\ cd ex md ex copy ..\unattend_x64.xml ex\ expand -f:* WindowsTH-KB2693643-x64.cab ex\ cd ex dism /online /apply-unattend="unattend_x64.xml" cd ..\ dism /online /Add-Package /PackagePath:"WindowsTH-KB2693643-x64.cab" cd ..\ rmdir ex /s /q
For x86 versions of Windows, create files unattend_x86.xml and installx86.bat as follows:
unattend_x86.xml
<?xml version="1.0" encoding="UTF-8"?> <unattend xmlns="urn:schemas-microsoft-com:setup" description="Auto unattend" author="pkgmgr.exe"> <servicing> <package action="stage"> <assemblyIdentity buildType="release" language="neutral" name="Microsoft-Windows-RemoteServerAdministrationTools-Client-Package-TopLevel" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" version="10.0.16299.2"/> <source location="." permanence="temporary"/> </package> </servicing> </unattend>
installx86.bat
@echo off md ex expand -f:* WindowsTH-RSAT_WS_1709-x86.msu ex\ cd ex md ex copy ..\unattend_x86.xml ex\ expand -f:* WindowsTH-KB2693643-x86.cab ex\ cd ex dism /online /apply-unattend="unattend_x86.xml" cd ..\ dism /online /Add-Package /PackagePath:"WindowsTH-KB2693643-x86.cab" cd ..\ rmdir ex /s /q
- Now, download the RSATClient msu package for x64 or x86 Windows versions and save it in the new directory.
- Launch File Explorer, browse to the temp directory and press ALT + D key combo, type CMD, and hit Enter – to start a command prompt with administrative permissions.
- Run installx64.bat or installx86.bat for your version of Windows accordingly.
After installation, you can clear the contents of the temp directory. Unless prompted, no restart is required.
And that’s it, folks!
How do I enable RSAT on my server?
To enable Remote Server Administration Tools, open the Server Manager main window and click on Add roles and features. In the Add Roles and Features Wizard, navigate to Features, scroll down, and select the Remote Server Administration Tools checkbox. Then, click Next. Some supporting features, such as the Web Server IIS role, may be required.
What are RSAT DNS server tools?
Remote Server Administrator Tools (RSAT) is a Windows application that allows remote management of the roles and features running on Windows Server using snap-ins. It simplifies the management of multiple servers by enabling the administration of Windows Server roles and features from a single location.
Obinna has completed B.Tech in Information & Communication Technology. He has worked as a System Support Engineer, primarily on User Endpoint Administration, as well as a Technical Analyst, primarily on Server/System Administration. He also has experience as a Network and Communications Officer. He has been a Windows Insider MVP (2020) and currently owns and runs a Computer Clinic.
Posted by essjae on March 7, 2016
Note: This assumes you’ve already got the RSAT tools installed. RSAT for Windows 10
Building on my post here for Hyper-V manager:
Running Hyper-V Manager as a different user in Windows 10 (Runas)
You can use the same method to get Active Directory Users and Computers (ADUC) and DNS MMC admin consoles working if you’re logged in with your Microsoft account versus your domain account:
DNS shortcut:
C:\Windows\System32\runas.exe /savecred /user:domain\username "cmd /c Start /B %SystemRoot%\system32\mmc.exe %SystemRoot%\system32\dnsmgmt.msc""
Icon path:
%SystemRoot%\system32\dnsmgr.dll
ADUC shortcut:
C:\Windows\System32\runas.exe /savecred /user:domain\username "cmd /c Start /B %SystemRoot%\system32\dsa.msc""
Icon path:
%SystemRoot%\system32\dsadmin.dll
When you double-click, you’ll get prompted for the password (if you haven’t already) and also for UAC
DHCP is a little more involved as the RSAT doesn’t include the DHCP manager. NOTE: this is not currently supported by MS
- 1. copy dhcpmgmt.msc and dhcpsnap.dll.mui from %windir%\system32\system32\en-us on the 2012 server to the same location on the w10 pc
- copy dhcpsnap.dll from %windir%\system32\ on the 2012 server to the w10 pc
- From an admin cmd prompt run: regsvr32.exe dhcpsnap.dll
- Create the short-cut: C:\Windows\System32\runas.exe /savecred /user:domain\username “cmd /c Start /B %SystemRoot%\system32\mmc.exe %SystemRoot%\system32\dhcpmgmt.msc””
- Change Icon path: %SystemRoot%\System32\dhcpsnap.dll
You’ll need to manually add your DHCP server each time you run this. I haven’t found a way to save the config.
*This was done with Windows 10 Build 1511 and Windows Server 2012.
For additional snap-ins, just modify the last part of the short-cut with the correct mmc path for the add-in you want.
This entry was posted on March 7, 2016 at 11:26 pm and is filed under Sysadmin, Windows, Windows 10, Windows 2012.
Tagged: ADUC, DHCP, DNS, RSAT, Windows, Windows 10, Windows Server 2012 R2. You can follow any responses to this entry through the RSS 2.0 feed.
You can leave a response, or trackback from your own site.
Recentley I discovered that DNS management is not installed when installing RSAT (WindowsTH-RSAT_WS_1709-x64) to Windows 10 1709 (Fall Creators Update).
After trying to install RSAT for Windows Server 2016, it was still missing. So I turned to Technet and I found a article (here).
The thing is that you have to download the following files and copy them to your system32 folder. It would be the best to copy it from your local Windows 2016 server.
%windir%\system32\dnsmgmt.msc
%windir%\system32\dnsmgr.dll
%windir%\system32\en-us\dnsmgmt.msc
%windir%\system32\en-us\DNSmgr.dll.mui
After that you must run CMD as an Administrator and run:
regsvr32 c:\windows\system32\dnsmgr.dll
And now you can run %windir%\system32\dnsmgmt.msc to open the DNS management console.
Good Luck